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RECEIVED 

CENTRAL FAX CENTER 

DEC 2 1 2005 

T1SJ THE CLAIMS; 

This listing of claims will replace all prior versions and listings of claims in the 
application. 

Listing of Claims 

1. (Currently amended) A method of updating security configurations of a plurality 
of servers, comprising: 

changing security information in a centralized server; 
receiving an update command; and 

downloading the changed security information to the plurality of servers in 
response to receiving the update command, wherein the downloaded changed security 
information is used to update a list of users or proups of users of th e o e ourity 
oonfiguratiopfl of the plumlity of oorvorg, and wher e in tho Goourity oonfigurotionQ of th e 
plurality of s e r^' e rs pro updat e d by updating 600urit>^ poromot e r lists gfloociat B d ^ith at 
least one of files and resources associated with each of the plurality of servers, 

2. (Original) The method of claim 1, wherein the plurality of servers are Windows 
NT servers and the centralized server is a directory server. 

3. (Original) The method of claim 1, wherein the centralized server is a directory 
server and wherein changing the security information includes using an editor to change a 
directory listing in the centralized server. 

4. (Canceled) 

5. (Previously presented) A method of updating security configurations of a 
plurality of servers, comprising: 

changing security information in a centralized server; 
receiving an update command; and 
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downloading the changed security infonnation to the plurality of servers in 
response to receiving the update command, wherein the downloaded changed security 
bfomiation is used to update the security configurations of the plurality of servers, 
wherein the security configurations of the plurality of servers are updated hy updating 
security parameter lists associated with at least one of files and resources associated with 
each of the plurality of servers, and wherein the security parameter lists identify 
authorized users or authorized groups of users of the at least one of files and resources 
associated with the security parameter lists. 

6. (Original) The mediod of claim 1 , wherein the update command is received from 
a network administrator, 

7. (Original) The method of claim 1, wherein the update command is received at 
scheduled periodic times* 

8 . (Original) The method of claim I, wherein the update command is received from 
one or more of the plurality of servers. 

9. (Original) The method of claim 1, wherein the centralized server is a light weight 
directory access protocol server. 

1 0. (Original) The method of claim I , wherein downloading the changed security 
information includes filtering a directory listing stored on the centralized server to extract 
the changed security information. 

1 1. (Original) The method of claim 1, wherein the security configurations are 
updated by filtering the downloaded changed security information to extract only 
necessary update information for updating the security configurations and then updating 
the security configurations based on the extracted necessary update information. 
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12. (Currently amended) A security configuration update server for updating security 
configurations of a plurality of servers, comprising: 

a controUeri 

a network interfiice coi:^led to the controller; and 

a storage device coupled to the controller, wherein the controller, in response to 
receiving an update comraand, downloads security infoimation stored in the storage 
device to the plurality of servers via the network interface, wherein the downloaded 
security information is used to update a list of use r s or groups of userg of tho Goourity 
oonfigurationD of the pluralit;^ of opr\wfl> and wh o roin the ooourit^' oonfisuration of the 
plurglity of sor^^orp or o updated by updating aoourity poromotor lists oQDOoiQtod with at 
least one of files and resources associated with each of the plurality of servers. 

13. (Original) The security configuration update server of claim 12, wherein the 
plurality of servers arc Windows servers and the security configuration update server 
is a directory server, 

14. (Original) The security configuration update server of claim 12, wherein the 
update command includes changes to the security information. 

15. (Canceled) 

16. (Previously presented) A security configuration update server for updating 
security configurations of a plurality of servers, comprising: 

a controller; 

a network interfiice coupled to the controller; and 

a storage device coupled to the controller, wherein the controller, in response to 
receiving an update command, downloads security information stored in the storage 
device to the plurality of servers via the network interface, wherein the downloaded 
security information is used to update the security configurations of the plurality of 
servers, wherein the security configuration of the plurality of servers are updated by 
updating security parameter lists associated with at least one of files and resources 
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associated with each of the plurality of servers, and wherein the security parameter lists 
identify authorized users or authorized groups of users of the at least one of files and 
resources associated with the security parameter lists. 

17. (Original) The security configuration update server of claim 12, wherein the 
update command is received from a network administrator. 

18. (Original) The security configuration update server of claim 12, wherein the 
update command is received at schedviled periodic times. 

1 9. (Original) The security configuration update server of claim 1 2, wherein the 
update command is received fix^m one or more of the plurality of servers. 

20- (Original) The security configuration update server of claim 12, wherein the 
security configuration update server is a light weight directory access protocol server. 

2 L (Original) The security configuration update server of claim 12, wherein 
downloading the changed security information includes filtering a directory listing stored 
in the storage device to extract the changed security inforaiation. 

22. (Original) The security configuration update server of claim 12, wherein the 
security configurations are updated by filtering the downloaded security infbnnation to 
extract only necessary update information for updating the security configurations and 
then updating the security configurations based on the extracted necessary update 
information. 

23. (Currently amended) A computer program product in a computer readable 
medium for updating security configurations of a plurality of servers, comprising: 

first instructions for changing security information in a centralized server; 
second instructions for receiving an update command^ and 
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third instructions for downloading the changed security information to the 
pltirality of servers in response to receiving the update command, wherein the 
downloaded changed security infonnation is used to update pi Vst of users or groups of 
users of the oeourity oonfigurationfl of tho pluralit>^ of gerverp, and whareio tho third 
inistruotions inotudo inotruotiopjg for updating o e ourity porometor liflta aDOogicitod wth at 
least one of files and resources associated with each of the plurality of servers. 

24. (Original) The computer program product of claim 23 , wherein the centralized 
server is a directory server and wherein the first instructions include instructions for xising 
an editor to change a directory listing in the centralized server, 

25. (Canceled) 

26. (Previously presented) A computer program product in a computer readahle 
medium for updating security configurations of a plurality of servers, comprising: 

first instructions for changing security information in a centralized server; 
second instructions for receiving an update command; and 
third instructions for downloading the changed security infonnation to the 
plurality of servers m response to receiving the update command, wherein the 
downloaded chang^ security infonnation is used to update the security configurations of 
the plurality of servers, wherein the third instmctioos include instructions for updating 
security param^er lists associated with at least one of files and resources associated with 
each of the plurality of servers, and wherein the security parameter lists identify 
authorized users or authorized groups of users of the at least one of files and resources 
associated with the security parameter lists. 

27. (Original) The conQ)uter program product of claim 23, wherein the update 
command is received from a network administraton 

28. (Original) The computer program product of claim 23, wherein the update 
command is received at scheduled periodic times- 
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29, (Original) The computer pwgram product of claim 23, wherein the update 
command is received from one or more of the plurality of servers, 

30. (Original) The computer program product of claim 23, wherein the centralized 
server is a Ught weight directory access protocol server. 

3 L (Original) The computer program product of claim 23, wherein the Aird 
instructions include instructions for filtering a directory Ustiiig stored on the centralized 
server to extract the changed security information, 

32. (Currently amended) A method in a data processing system for updating access 
information for a plurality of servers, the method comprising: 

collecting changes to access information at the data processing system to form 
modified access information; and 

responsive to a policy, txansferrir^g the modified access information to the plurality of 
servers, wherein the modified access information is used to update a list pf ys^yg or 
groups of users of at least o n e of files and resources associated with the soourity 
oonfigumtiono of the plurality of servers. 

33. (Original) The method of claim 32, wherein the policy comprises receiving a 
request to update the security configurations for the plurality of servers. 

34. (Original) The method of claim 32, wherein the policy comprises periodically 
initiating transfer of modified ajccess information to the plurality of servers. 

35. (Origtoal) The method of claim 32, wherein the policy comprises initiating the 
transfer of the modified access information to the plurality of servers in response to a 
selected event. 

36. (Original) The method of claim 35, wherein the selected event is a periodic event. 
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37. (Currently amended) A data processing system, comprisSng: 
a centralized server; and 

a plurality of servers coupled to the centralized server by at least one network, 
wherein the centralized server stores seoxjrity information^ and wherein when the 
cenjfralized server receives an update conamand, the security information stored in the 
centralized server is downloaded to at least one of the plurality of servers, ttie 
downloaded security information being used by the at least one of the plurality of servers 
to update a list of users or troups of users of tho Qoourit>T configurations of th e at loaot ono 
of th e plurolity of 6on^oro» wh e rein tha Beourity oonfiguration of the at l e ast on e of th e 
plurality ,of fl q rvaro i s updated by updating a fl e oinity parom e tor Hat oooooiat e d with at 
least one of files and resources associated with the at least one of the plurality of servers. 

38. (Original) The systeni of claim 37. wherein the plurality of servers are Windows 
NT servers and the centralized server is a directory server. 

S9, (Canceled) 

40. (Original) The system of claim 37, wherein the security information is filtered by 
the centralized server, prior to downloading the security information, to extract only 
security information that has been changed. 
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